Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DE8E70B2E87C11EFAC4820B4762E951A.roa
File: DE8E70B2E87C11EFAC4820B4762E951A.roa (raw, json)
Hash identifier: mSKHktHJZN0RRw/2GApclv1SI0nPYLjlTXBLUXFxhaA=
Subject key identifier: FA:47:C5:99:E6:DA:1D:D1:C3:E9:52:F6:E4:D1:DA:C7:3B:96:BF:77
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0628
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DE8E70B2E87C11EFAC4820B4762E951A.roa
Signing time: Tue 11 Feb 2025 13:34:08 +0000
ROA not before: Tue 11 Feb 2025 13:34:04 +0000
ROA not after: Wed 11 Feb 2026 13:34:04 +0000
asID: 401116
IP address blocks: 196.251.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 11 13:34:04 2025 GMT
Not After : Feb 11 13:34:04 2026 GMT
Subject: CN=67ab51d0-55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:40:9e:f6:71:b9:fa:1e:93:4b:87:53:c0:
02:d6:ca:31:1d:bf:11:60:ec:56:25:cc:68:14:2b:
be:8f:ab:7b:6e:83:da:c9:35:bb:18:a3:50:f1:94:
10:67:e5:9b:00:2f:ed:94:32:3d:e6:4e:13:42:0d:
7b:b3:6c:3e:08:c5:72:7c:5b:2e:80:12:65:4f:a4:
17:2d:53:26:a5:58:bd:79:d4:75:bb:d7:f6:85:d5:
62:30:4e:16:02:61:f6:62:37:25:0c:a9:f7:16:61:
d1:a1:b0:40:28:f7:15:07:d2:15:a4:cb:76:01:39:
d7:72:bb:f3:43:47:a7:f0:d4:8d:0b:2e:36:d7:ca:
25:54:15:e4:83:83:f2:4b:75:ce:65:f7:23:92:0b:
38:01:9d:d7:9a:15:f6:bf:d2:50:db:8e:6c:48:41:
48:78:c6:85:b7:e7:4a:e8:87:82:39:c4:dc:fa:87:
61:f5:7c:87:69:60:a5:95:8c:5d:f3:e6:e6:77:bd:
3a:5c:fe:45:5a:d7:cc:ba:0e:55:26:67:de:aa:cf:
f4:36:df:61:93:76:ed:54:58:df:09:b9:61:49:68:
bc:65:4b:c6:7e:9e:4a:0c:d7:25:39:c0:a9:ec:59:
f4:eb:77:f7:0c:42:5f:d2:fd:f5:0c:d2:31:fa:0d:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:C5:99:E6:DA:1D:D1:C3:E9:52:F6:E4:D1:DA:C7:3B:96:BF:77
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DE8E70B2E87C11EFAC4820B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d9:3a:67:0f:bf:9d:45:32:ad:67:64:d2:46:33:cb:38:61:
7a:04:32:3f:d4:fd:8a:ae:37:94:56:f8:a9:dd:52:a4:e2:48:
eb:a0:c0:c9:53:2d:67:e9:62:0e:c0:7e:34:05:a8:3e:29:0a:
97:37:71:9c:44:96:64:cb:f7:ee:23:42:d6:98:04:6d:03:39:
b7:1f:5d:11:cb:11:38:b2:7f:d8:51:e7:1e:72:ea:2e:63:8a:
ca:94:95:67:c8:69:9e:92:e8:e5:b4:a4:54:70:35:6d:8a:9e:
ea:da:a7:87:3c:0c:47:d5:b0:4d:58:06:e0:df:6d:73:29:22:
22:d9:12:f3:50:3e:54:2a:97:2c:7f:b4:5e:21:58:94:c6:c4:
95:fe:d0:f1:0a:0a:6e:ca:a4:97:e3:86:4b:f6:a0:e5:45:f2:
2b:c1:19:93:05:80:23:3f:cb:55:e2:6d:80:50:ba:eb:2f:9a:
f4:e8:c7:21:5b:6b:e4:15:33:4c:c5:c6:36:5b:3f:16:83:3e:
fc:91:15:a8:2a:fc:6e:2a:15:9b:d9:1a:10:a5:23:5b:16:0f:
7e:e0:91:c7:ca:07:3b:58:e0:34:79:a8:18:b3:f4:7c:85:13:
e1:3d:0f:b7:57:d8:28:09:53:08:72:47:ca:a3:5b:ea:03:8c:
87:23:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client